Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250411 6.9 警告 PlotSoft L.L.C. - PlotSoft PDFill PDF Editor における権限を取得される脆弱性 CWE-Other
その他
CVE-2011-3690 2011-10-4 10:00 2011-09-27 Show GitHub Exploit DB Packet Storm
250412 7.5 危険 Sonexis Technology, Inc. - Sonexis ConferenceManager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-3688 2011-10-4 09:45 2011-09-27 Show GitHub Exploit DB Packet Storm
250413 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3687 2011-10-3 14:56 2011-09-27 Show GitHub Exploit DB Packet Storm
250414 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager の myAddressBook.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3686 2011-10-3 14:55 2011-09-27 Show GitHub Exploit DB Packet Storm
250415 1.9 注意 Tembria - Tembria Server Monitor における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-3685 2011-10-3 14:54 2011-09-27 Show GitHub Exploit DB Packet Storm
250416 4.3 警告 Tembria - Tembria Server Monitor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3684 2011-10-3 14:52 2011-09-27 Show GitHub Exploit DB Packet Storm
250417 7.5 危険 Newgen Software Technologies Limited - Newgen OmniDocs におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-3645 2011-10-3 14:48 2011-09-27 Show GitHub Exploit DB Packet Storm
250418 7.5 危険 AliBabaClone.com - Alibaba Clone B2B の countrydetails.php におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4849 2011-09-30 14:24 2011-09-27 Show GitHub Exploit DB Packet Storm
250419 4.3 警告 Diferior - Diferior におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4850 2011-09-30 14:22 2011-09-27 Show GitHub Exploit DB Packet Storm
250420 7.5 危険 Eclime - Eclime における複数の SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4851 2011-09-30 14:19 2011-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212091 6.1 MEDIUM
Network
audiocodes mediant_500l-msbr_firmware
mediant_500-mbsr_firmware
mediant_m800b-msbr_firmware
mediant_800c-msbr_firmware
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.253. A cross-site scripting (XSS) vulnerability in the sear… CWE-79
Cross-site Scripting
CVE-2019-9230 2024-11-21 13:51 2019-07-19 Show GitHub Exploit DB Packet Storm
212092 5.3 MEDIUM
Network
mailvelope mailvelope Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key w… CWE-320
 Key Management Errors
CVE-2019-9150 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
212093 6.5 MEDIUM
Network
mailvelope mailvelope Mailvelope prior to 3.3.0 allows private key operations without user interaction via its client-API. By modifying an URL parameter in Mailvelope, an attacker is able to sign (and encrypt) arbitrary m… CWE-347
CWE-863
 Improper Verification of Cryptographic Signature
 Incorrect Authorization
CVE-2019-9149 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
212094 4.3 MEDIUM
Network
mailvelope mailvelope Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are… CWE-295
Improper Certificate Validation 
CVE-2019-9148 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
212095 4.3 MEDIUM
Network
mailvelope mailvelope Mailvelope prior to 3.1.0 is vulnerable to a clickjacking attack against the settings page. As the settings page is intended to be accessible from web applications, the browser's extension isolation … CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2019-9147 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
212096 9.8 CRITICAL
Network
jetbrains intellij_idea In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server … CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2019-9186 2024-11-21 13:51 2019-07-4 Show GitHub Exploit DB Packet Storm
212097 5.7 MEDIUM
Adjacent
gemalto ezio_ds3_server Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control. CWE-294
Authentication Bypass by Capture-replay 
CVE-2019-9158 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm
212098 5.7 MEDIUM
Adjacent
gemalto ezio_ds3_server Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure. CWE-22
Path Traversal
CVE-2019-9157 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm
212099 8.0 HIGH
Adjacent
gemalto ezio_ds3_server Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection. CWE-78
OS Command 
CVE-2019-9156 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm
212100 8.8 HIGH
Network
primasystems flexair Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately execu… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-9189 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm